skills.rest
balic-AI-ML-R-D-Resources
balic-AI-ML-R-D-ResourcesOFFICIAL
Explore all skills by this author →
GitHub

ossfuzz

Automate OSS-Fuzz enrollment, Docker environments, and fuzzing harnesses for open-source projects.

Updated Apr 5, 2026
Search Tags:#docker#fuzzing#harness#security-testing#continuous-testing#ossfuzz
One-click install
npx skills add https://github.com/balic-AI-ML-R-D-Resources/eliza_autonomous_agents --skill ossfuzz-balic-ai-ml-r-d-resources
Or copy as Structured Prompt for Agent▼
Please help me install this Agent Skill.
Skill: ossfuzz
Source: https://github.com/balic-AI-ML-R-D-Resources/eliza_autonomous_agents/tree/main/packages/skills/skills/testing-handbook-skills/skills/ossfuzz
Command: npx skills add https://github.com/balic-AI-ML-R-D-Resources/eliza_autonomous_agents --skill ossfuzz-balic-ai-ml-r-d-resources

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

Automates the end-to-end setup and management of fuzzing infrastructure for open-source projects using OSS-Fuzz, including enrollment configuration, harness building, and coverage reporting.

Core Features & Use Cases

  • Configure project.yaml, Dockerfile, and build.sh to enroll projects in OSS-Fuzz.
  • Build fuzzers locally with helper.py and run harnesses with sanitizers to generate coverage reports.
  • Reproduce crashes from OSS-Fuzz bug reports and evaluate criticality scores for project acceptance; support private OSS-Fuzz hosting.

Quick Start

Configure enrollment files, build fuzzers, and run a sample harness to validate OSS-Fuzz setup.

Frequently Asked Questions about ossfuzz

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I set up OSS-Fuzz for an open-source project?▼

To set up OSS-Fuzz, configure project.yaml, Dockerfile, and build.sh for enrollment, then build fuzzers with helper.py and run harnesses with sanitizers to validate the environment. This automates end-to-end fuzzing infrastructure configuration.

Can I use OSS-Fuzz fuzzing for Python and Rust projects?▼

Yes, OSS-Fuzz fuzzing supports C/C++, Rust, Python (Atheris), and Go projects. The setup process builds fuzzers and orchestrates harnesses across these languages using Docker-based environments and various sanitizers.

How do I reproduce a crash from an OSS-Fuzz bug report?▼

To reproduce a crash from an OSS-Fuzz bug report, use the configured harness orchestration to run the specific fuzzer with sanitizers. This allows you to analyze the crash data and evaluate its criticality score for project acceptance.

What files are required to enroll a project in OSS-Fuzz?▼

Enrolling a project in OSS-Fuzz requires configuring project.yaml, Dockerfile, and build.sh. These files satisfy the enrollment requirements and establish the Docker-based environment for building fuzzers and generating coverage results.

Does OSS-Fuzz support private fuzzing pipelines?▼

Yes, OSS-Fuzz supports private fuzzing pipelines. The setup determines project eligibility for both public and private fuzzing pipelines, allowing you to host and run harnesses with various sanitizers in a private environment.

How do I generate coverage reports when building fuzzers locally?▼

To generate coverage reports when building fuzzers locally, use helper.py to build the fuzzers and run harnesses with sanitizers. This process produces coverage results that help analyze the fuzzing setup for the open-source project.

Related Skills

Explore More Software Engineering Skills→
trailofbitstrailofbits
6.5k

ossfuzz

Automate continuous fuzz testing for open-source projects with OSS-Fuzz infrastructure.

Official
Advanced
riparinoriparino
1

defensive-fuzzing

Implement defensive fuzzing with AFL++ and libFuzzer in CI/CD pipelines.

Community
Advanced
SuperlendSuperlend

ossfuzz

Automate project enrollment and management in OSS-Fuzz fuzzing infrastructure.

Official
Advanced
Ramprasad4121Ramprasad4121
1

ossfuzz

Set up and run continuous fuzzing for open-source projects with OSS-Fuzz.

Community
Advanced